DisclosureLens
MalwareFinancial ServicesFinanceRansomwareVulnerability ExploitLockBitLockBit 3.xData ExfiltratedData EncryptedRansom DemandedTargetedIdentity (basic)Government IDFinancial accountMediumContained

PLANET HOME LENDING, LLC

bd_423f0bb984a52f1a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 15, 2023

Filed

Feb 9, 2024

To disclose

12 weeks

Affected

Not disclosed

Confidence

66%
Full breach record for PLANET HOME LENDING, LLC →6 incidents on file

Planet Home Lending, LLC notified South Carolina residents of a ransomware incident involving the LockBit threat actor. The attack exploited the 'Citrix Bleed' vulnerability in a Citrix software product on November 15, 2023. The incident resulted in the unauthorized access of a read-only data folder containing customer loan files with PII, including SSNs and financial account numbers. The company engaged forensic investigators, notified the FBI, and offered 24 months of credit monitoring.

Leak gap clock✗ Leak >180d12 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 12 weeks / 86 days

Nov 15, 2023

Begins

Nov 15, 2023

Discovered

Feb 9, 2024

Filed

vs. sector median

+4 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by cl0p about this victim predates this filing by 198 days.View originating leak claim

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.